Security Engineer – Vulnerability Management & AI-Driven Security Operations (f/m/div.)

Your contribution to something big:

How can we make Bosch products more secure while making Security Operations smarter and more efficient?

As a Security Engineer, you will strengthen the cybersecurity resilience of Bosch products by combining Vulnerability Management, Product Security and AI-driven automation. You will help identify, assess and prioritize vulnerabilities while developing intelligent solutions that reduce manual effort and support security teams in their daily work.

You will collaborate with development teams, Product Security Incident Response Teams (PSIRT) and cybersecurity organizations across Bosch.

What distinguishes you:

Education: Bachelor's or Master's degree in Computer Science, Software Engineering, Cybersecurity, Information Security or a related discipline.

Experience

• Experience in cybersecurity, Product Security, Vulnerability Management, Security Operations or software engineering.
• Experience in automotive software engineering or customer projects is a plus.

Vulnerability Management & Product Security

• Monitor, assess and prioritize vulnerabilities from internal and external sources.
• Perform vulnerability triage, risk assessment and impact analysis.
• Coordinate vulnerability management with development and product teams.
• Support security incident handling and vulnerability disclosure processes.
• Track vulnerabilities throughout their lifecycle and continuously improve related processes.
• Support vulnerability monitoring before and after Start of Production (SOP).

AI-Driven Security Operations & Automation

• Develop Python-based automation for security use cases such as SecBOM analysis, CVE enrichment and security finding prioritization.
• Build AI copilots and agent-based workflows for vulnerability management and security analysis.
• Apply LLMs, prompt engineering and Retrieval-Augmented Generation (RAG) to improve security knowledge management.
• Evaluate emerging AI technologies and their application to Product Security.
• Automate repetitive security activities and support security analytics and dashboards.

Know-how

• Advanced Python skills and experience with automation.
• Knowledge of CI/CD and data engineering fundamentals.
• Understanding of LLMs, RAG, prompt engineering and/or AI agents.
• Knowledge of Product Security, incident handling, security risk assessment or Secure Development Lifecycle is an advantage.

Working Style and Methods

• Analytical, structured and solution-oriented.
• Able to coordinate topics and collaborate across teams.
• Proactive mindset with an interest in automation and emerging technologies.

Personality

• Strong team player and clear communicator.
• Confident working with technical and business stakeholders.
• Curious, collaborative and willing to take ownership.

Languages: Good command of English.

Work #LikeABosch includes:

⚖️ Flexible work conditions

🔀 Hybrid work system

🌐 Exchange with colleagues around the world

🛡️ Health insurance

🧑‍⚕️ Medical office (psychology and general clinic) & Social Services Office on site

📚 Training opportunities (p.e., technical training, foreign languages training) & certifications

📈 Opportunities for career progression and continuous professional development

💲 Access to great discounts in partnerships and Bosch products

🏋️ Sports and health related activities

💰 Flexible benefits platform

🚉 Great access to public transports

🚌 Free transport from Porto

🅿️ Free parking lot

🍽️ Canteen